IT Compliance · St. Louis & St. Charles
Know where you stand before an auditor, insurer or customer asks
If your business handles patient records, card payments, tax returns or defense contract data, there are rules for how you protect it. We find the gaps and help you close them.
What a compliance review checks
✓
Hardware and software inventory
✓
Internal and external vulnerability scans
✓
Who has access to what
✓
Backups and recovery
✓
A written security plan
Plus whatever your specific standard requires.
Which rules apply to you
Four common standards we help with
Not sure which one is yours? That's the first thing we figure out together.
HIPAA
Healthcare
Medical and dental offices, and the vendors who handle patient information for them.
PCI
Payments
Any business that takes credit or debit cards, in person or online. Covered by PCI DSS.
4557
Tax & accounting
Tax preparers and accounting firms. IRS Publication 4557 expects a written plan for protecting client tax data.
800-171
Defense contractors
Manufacturers and suppliers handling controlled government information under NIST 800-171, the basis for CMMC Level 2.
The IT audit
What we look at
We document your environment and test it, so nothing is left to guesswork.
◎
Every device and program
We inventory your hardware and software, so you know exactly what is on your network.
⌖
Inside and outside scans
We scan your network from the inside and from the internet for security problems.
☰
How your team works
Short questionnaires cover passwords, access, backups and day-to-day data handling.
⇄
Your setup vs. the standard
We compare what you have to what your standard requires and note every gap.
How it works
Three steps to a clear plan
01
Identify your standard
We confirm which requirements apply to your business and what they expect.
02
Audit
We inventory, scan and review your current IT practices.
03
Report and roadmap
A written report with what we found, what to fix and the order to fix it in.
Your IT Audit Report
A report you can use
Findings
Every gap, in plain English
Priority fixes
What to do first, and why
Roadmap
A clear path to meeting your standard
Use it as your roadmap, or show it to vendors, insurers and partners who ask how you protect customer data.
Then keep it that way
Once the gaps are closed, we can keep those controls in place and up to date under a managed IT agreement. We help you get ready and stay ready. Where a standard requires a formal certification or assessment, that comes from an approved outside assessor.
Find out where you stand
Call or send us a message. We'll ask a few questions about your business and tell you what applies.